jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]654e6b0be4a673e5e2e5701863f36729

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.654e6b0be4a673e5e2e5701863f36729
Size 1.2MB
Sample261014-e61jkafw71
SHA256 074f1734c759e0387b82720ade45b1a66bb74f1472b46cc9d4baca7dbee9c32b
MD5 654e6b0be4a673e5e2e5701863f36729
SHA1 baa09dbbb154506cd01aa600828ffca355212cc9
SHA512 b4c676f42b214cc7eedabb3e107e5b1e25c5cd6c0eb9c0df36329a6f2d705722f472fac64e7ebc75d8119df61ca7ee1d38d8cb3c1b789c5c094f9e986fdbcb84
SSDEEP 12288:C02cS+qZ2DYBpZCsw1Pq83KvWaFDIlwyUcqEiJT:32cSZ2SIVPqs8W3lwfcz
TLSH
T1ED55124372C28CB1D1675D361879DDA70E7F7A308E108E7B36850A2E4E684D0AD66FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.654e6b0be4a673e5e2e5701863f36729

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.654e6b0be4a673e5e2e5701863f36729

.exe 1.2MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.654e6b0be4a673e5e2e5701863f36729

IMPHASH 52be06431f46da8806359951240ee3cb
SHA256 074f1734c759e0387b82720ade45b1a66bb74f1472b46cc9d4baca7dbee9c32b
MD5 654e6b0be4a673e5e2e5701863f36729
SHA1 baa09dbbb154506cd01aa600828ffca355212cc9
SHA512 b4c676f42b214cc7eedabb3e107e5b1e25c5cd6c0eb9c0df36329a6f2d705722f472fac64e7ebc75d8119df61ca7ee1d38d8cb3c1b789c5c094f9e986fdbcb84
SSDEEP 12288:C02cS+qZ2DYBpZCsw1Pq83KvWaFDIlwyUcqEiJT:32cSZ2SIVPqs8W3lwfcz
TLSH
T1ED55124372C28CB1D1675D361879DDA70E7F7A308E108E7B36850A2E4E684D0AD66FA7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6039

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointerEx GetConsoleMode WriteConsoleW FlushFileBuffers HeapReAlloc HeapSize DecodePointer CreateFileW GetNamedPipeClientComputerNameW GetMaximumProcessorGroupCount GetFinalPathNameByHandleW GetApplicationRecoveryCallback CreateMemoryResourceNotification GetModuleHandleW GetConsoleCP VirtualProtect GetProcessHeap GetStringTypeW GetFileType SetStdHandle LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW RaiseException

user32

CreateWindowExW ReleaseDC GetDC RegisterClassW LoadCursorW DefWindowProcW EndPaint BeginPaint SendMessageW

gdi32

CreatePalette CreateMetaFileW CreateHatchBrush CreateHalftonePalette CreateFontW ColorCorrectPalette CloseMetaFile CreateBrushIndirect CreateBitmapIndirect GetStockObject CreateSolidBrush

shell32

ord192 ord168 ord167 ord98 ord92 ord90 SetCurrentProcessExplicitAppUserModelID ord170 ord709 SHLoadNonloadedIconOverlayIdentifiers Shell_GetCachedImageIndexW GetCurrentProcessExplicitAppUserModelID SHAssocEnumHandlersForProtocolByApplication

Sharing